Build any WordPress contact form in minutes, without bloated scripts on your public site. Sobi Forms is a lightweight contact form plugin and drag and drop form builder for those who want native SMTP, webhooks, file uploads, spam protection, and a beautiful submissions inbox in one place.

Perfect for:

Contact forms and lead capture forms
Quote request forms and support forms
Registration forms and newsletter signups
Job application forms and file upload forms (resumes, PDFs, images)

Embed with shortcode or Gutenberg block on any page. React loads in the admin builder only — your visitors get a fast, lean front-end. Works with Elementor, Divi, Gutenberg and WooCommerce.

Learn more: sobiforms.com — features, FAQ, and the public roadmap.

Why Sobi Forms?

Lightweight — ~5 KB CSS + JS on form pages (gzipped); assets load only where a form is rendered
No bloat — no jQuery, no front-end React, no Bootstrap on the public site
Native SMTP — route notification and confirmation emails through your mail server
Native webhooks — POST JSON to Zapier, Make, n8n, or any HTTPS endpoint
Gmail-style submissions inbox — read, star, filter, search, spam queue, and Trashed tab; split list + detail layout to manage every contact form submission in one place
File uploads — secure private storage; admin-only downloads
AJAX contact forms — submit without a full page reload
GDPR-friendly — inbox-only delivery, hashed IP, no tracking pixels
Spam protection — honeypot, nonces, rate limit, optional Turnstile and Akismet
Fast admin — drag and drop form builder (React in admin only)

File Upload Forms

Collect resumes, PDFs, and images on the same form as the rest of your fields — no extra plugin. You pick what to accept; files stay private on your server and download only from the admin inbox.

Drag and Drop Form Builder

Canvas on the left, settings on the right — build a form in minutes and save without a page reload. Start from templates (Contact, Quote, Job, Event, Support). Put fields side by side (First name | Last name). Mark each multi-checkbox option Required or Optional — mandatory terms, optional newsletter. Add inline links in paragraphs and consent checkboxes. Pause a form, close it on a date, or stop after N submissions. Text, email, phone, date, file upload, consent checkbox, and more — all in one builder.

Native SMTP

Stop fighting WordPress mail. Route admin notifications and visitor thank-yous through your SMTP server — configure once under Sobi Forms Settings, test the connection, and retry failed sends from the logs. No third-party form SaaS in the middle.

Webhooks

Connect Sobi Forms to Zapier, Make, n8n, or any HTTPS endpoint. Add unlimited webhook URLs per form under Automations in the builder; submissions POST as JSON in the background. Failed deliveries land in the logs with Retry — no extra connector plugin.

Submissions Inbox

Manage every lead like email: read/unread, star, search, filter, spam queue, and Trashed with restore. Split list + detail, admin notes, and a dashboard widget for unread submissions. See which page a submission came from. Export to CSV or JSON when you need a report or backup.

Embed Anywhere

Shortcode or Gutenberg block — one click to Embed, paste on any page. Works with Elementor, Divi, WooCommerce, and any builder that supports shortcodes or blocks. ~5 KB on pages with a form; zero weight everywhere else.

Security & Privacy

Honeypot, nonces, and server-side validation on every submission. Optional Akismet and Cloudflare Turnstile. Rate limiting against abuse. Data stays on your server — no tracking pixels, inbox-only mode when you want zero email.

Privacy Policy

Sobi Forms processes data submitted through your forms. Per form you choose how submissions are delivered:

Email notifications – when the admin notification action is enabled with valid recipient addresses, field values are sent via wp_mail() or SMTP.
Visitor confirmation – when Send user confirmation is enabled under After submit, the submitter may receive a simple thank-you at the address from the selected email field (no submitted field values in that email).
Database storage – when Save to inbox is enabled (default for new forms), submissions are saved in custom tables on your site (wp_sobiforms_submissions, wp_sobiforms_forms). Retention / auto-purge is configured on that action. You can use inbox-only delivery with no email.
Hashed IP – when storage is enabled, a one-way SHA-256 hash of the visitor IP is stored with each submission for abuse prevention. Raw IP addresses are not stored.
Rate limiting – configurable under Settings Spam protection (default 10 submissions per hashed IP per hour; set to 0 to disable). Transients expire automatically.
Admin notes – internal notes on submissions are stored in your database and never shown on the front-end or included in emails.
No tracking – Sobi Forms does not connect to third-party analytics or advertising when processing form submissions.
Optional Akismet – if you enable Akismet spam filtering under Settings Spam protection and the Akismet plugin is active, submission content may be sent to Akismet’s service for spam checks.
Optional Cloudflare Turnstile – if you enable Turnstile under Settings Spam protection, the browser loads Cloudflare’s Turnstile script and may send a verification token to Cloudflare when a form is submitted.
Optional Webhooks – if you add Trigger webhook under After submit, submission data (and file URLs when applicable) are POSTed to the URL you provide.
No data sent to the plugin author – form submissions stay on your server and mail server. The Feedback settings tab links to the WordPress.org support forum and sobiforms.com/roadmap only if you choose to open them.

Site owners are responsible for their privacy policy and lawful basis for collecting visitor data.

Licenses for Third-Party Resources

This plugin bundled resources covered by their own respective licenses:
* Lucide Icons – https://lucide.dev
License: ISC (https://lucide.dev/license)
Copyright (c) Lucide Contributors